Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: 6dhTjhbOY3o7K/sOSdjmoqhVpu30q1bpbhZJ36hZXug=
Subject key identifier: 6C:B7:AB:30:8D:9E:82:D4:CF:02:54:CE:CB:06:D9:87:C3:BF:B8:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21BAFAA861C38A47492696C7E924A34D1653F273
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:24 +0000
ROA not before: Thu 04 Sep 2025 06:58:24 +0000
ROA not after: Thu 03 Sep 2026 07:03:24 +0000
asID: 3257
IP address blocks: 217.217.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:fa:a8:61:c3:8a:47:49:26:96:c7:e9:24:a3:4d:16:53:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:24 2025 GMT
Not After : Sep 3 07:03:24 2026 GMT
Subject: CN=6CB7AB308D9E82D4CF0254CECB06D987C3BFB863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:68:b4:8e:0c:b7:e5:b2:01:7e:fb:57:a5:
97:eb:d6:89:36:70:a4:73:c7:1c:da:87:66:86:86:
e1:57:4b:e8:f3:c6:51:f5:ee:02:8c:d0:20:c2:fc:
29:fe:80:9f:9b:a9:90:ed:57:64:67:ea:99:e8:1a:
b8:6c:01:88:03:55:7e:74:46:06:4f:aa:ab:af:05:
0d:98:35:86:b6:2e:dd:8c:f8:9e:60:e5:93:a9:33:
fb:44:5f:45:63:6b:8b:ea:5e:59:1e:d0:8c:a6:45:
49:7a:d1:15:89:bf:3f:e5:f7:ca:75:0b:73:a6:80:
29:c1:10:ab:74:7e:13:86:fa:e1:91:cb:ea:71:b7:
26:da:3e:63:a0:29:7a:1b:77:9c:dc:f0:77:2e:d9:
ae:ea:b9:89:02:7a:f8:ed:1b:65:59:4d:e1:dc:9e:
a1:40:40:24:8f:af:92:14:7a:64:4a:7e:54:d0:0c:
d0:78:62:ee:79:0c:0b:8d:56:40:18:bb:56:88:d1:
38:24:e2:19:a3:27:49:a6:4f:bc:99:82:96:ac:41:
1a:16:c3:bd:77:36:4c:d9:3b:1b:4d:28:ef:e9:07:
db:bc:af:08:79:c1:65:48:ae:0f:70:e8:21:c3:71:
de:48:47:4e:a6:70:a2:5a:50:5d:99:77:f3:0b:76:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:AB:30:8D:9E:82:D4:CF:02:54:CE:CB:06:D9:87:C3:BF:B8:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.222.0/24
Signature Algorithm: sha256WithRSAEncryption
16:78:01:d5:cb:b2:ce:17:72:fa:cb:ec:c2:77:07:b7:9e:92:
3a:fd:36:5b:3b:ea:66:d7:dc:29:2f:dd:0f:81:64:8c:5b:b5:
4a:7e:1f:82:8a:e2:ad:9b:3d:2b:f5:d8:9d:0e:a2:8c:53:e6:
a4:27:a0:c1:d9:ba:7d:d2:d5:97:ce:d4:c7:cc:68:aa:63:01:
cd:b3:6e:94:37:20:37:57:a6:97:54:81:80:90:fd:5d:9d:24:
a9:1d:8b:c4:54:e6:0d:31:08:f7:75:5e:17:a5:65:c1:e3:24:
59:b1:fa:83:99:ad:90:68:1f:61:19:f2:ae:16:67:3f:7a:b3:
5a:bb:8a:76:43:29:f3:6a:31:2d:e2:1a:c3:6d:44:4e:0e:56:
90:27:6e:8f:51:41:e4:62:c8:93:a3:25:1a:33:ff:20:9d:ac:
e2:bc:d3:df:4d:d5:86:11:40:ee:66:2c:57:4d:c4:3c:5c:03:
68:61:97:81:1a:c2:23:51:bb:c9:ea:eb:b9:49:ed:65:aa:e8:
9f:db:5e:af:eb:fd:18:84:92:0b:dc:cc:a7:70:81:68:27:f3:
31:10:5a:ad:c8:3d:38:dc:c5:45:9d:05:a7:d2:ff:8b:ec:8c:
ed:39:57:8c:9a:52:9a:82:53:0f:e5:f1:7f:ed:52:d2:99:cc:
13:fe:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:44:36 2025 by rpki-client